Senior Cybersecurity Analyst

This is a fully remote position, open to applicants in Pennsylvania.

📋 Description

• Enhance, oversee, and guide LSAC Security Policies, Procedures, and Best Practices while maintaining and improving the formal Security Systems Program.

• Contribute to the creation of effective Cybersecurity policies to tackle current and future threats, including AI computer policies, data governance, and compliance.

• Conduct IT Security inspections, tests, system-level audits, and evaluations of existing IT software and hardware to support and perform annual reviews ensuring compliance with SOC2, IT and Financial Audits, PCI/DSS, and more.

• Assess and recommend new Security products and services, both hardware and software.

• Consult, monitor, and report on Security systems, including intrusion prevention and detection systems, VPNs, and firewalls.

• Execute network and system vulnerability scans and penetration testing on workstations, servers, network devices, and other computer systems, collaborating with relevant groups to address Security gaps.

• Develop and assist in creating automated tools that analyze Security violations found in access control logs to identify patterns and evidence of issues.

• Offer consultation and support to Infrastructure, Executive Staff, and personnel from other departments regarding information and systems Security.

• Uphold a high level of confidentiality while identifying and assisting in the resolution of Security issues.

• Monitor networks and websites to ensure proper Security procedures, software configurations, and to detect signs of compromise or attempted compromise.

• Actively promote and enhance Security Awareness programs for LSAC staff in collaboration with the Human Resources Department.

• Engage in all Information Security projects and participate in meetings to provide insights and recommendations on matters affecting LSAC’s Security framework.

• Assess and propose solutions to current or potential Security threats related to the data and computing environment.

• Serve as a member of the Security Incident Response Team and Security Task Force.

• Address Security incidents by providing essential documentation and consultation, preserving all records of changes made to access control lists to facilitate investigations, and contributing to the response, root cause analysis, and solution implementation.

• Stay informed about trends and issues in the industry concerning Computer Security.

⛳️ Requirements

• A Bachelor’s degree in Information Systems and/or a Security curriculum is mandatory.

• At least 10 years of IT experience, with more than 5 years focused on IT Security, or an equivalent combination of education, training, and experience is essential.

• Professional certifications such as CISSP, GIAS, Microsoft MCSE, or other Security certifications are advantageous.

• Extensive working knowledge of Security Program issues and best practices, including system threat vulnerability assessments, system Security requirements/architectures, and Security risk mitigation plans that safeguard IT systems and data information missions.

• Strong experience in establishing and promoting a Security Systems Program, with the capability to provide guidance that enhances Security Awareness throughout LSAC.

• Proficient knowledge and experience with various network protocols, firewalls, penetration tools, remote access, network operating systems, PC operating systems, vulnerabilities, and network management tools.

• Familiarity with Security tools and best practices, Windows-based systems, Tenable Nessus, Microsoft Azure, Windows Defender, and other technical platforms and administration.

🏝️ Benefits

• Flexible work arrangements